Release v0.46

Author: keithah

CHANGELOG.md

@@ -2,6 +2,37 @@
 
 All notable changes to this project are documented in this file.
 
+## v0.46 (2026-06-26)
+
+Review/deployment reliability hardening after optimizer and thermo-nuclear quality passes, deployed to Azure Container Apps and validated against the live Kodi review trigger path.
+
+### Added
+
+- Optimizer indexes and paired rollback migration for review graph, review-comment retrieval, wiki linkshere, and dependency-bump history paths.
+- Internal MCP auth fallback module and coverage for query-token compatibility on callback surfaces.
+- Regression coverage for per-page PR file retry, cluster candidate lookup concurrency, safe regex suppression patterns, wiki replacement fallback, and dependency-bump enrichment.
+
+### Changed
+
+- PR file fetching now goes through one paginated helper with retry at the helper boundary, including addon checks, review/mention fallbacks, wiki staleness detection, dependency-bump merge history, and the PR-evidence backfill script.
+- Cluster matching no longer exposes a fake store-level batch method; bounded nearest-candidate lookup concurrency now lives in the pipeline.
+- Review, retrieval, wiki, and dependency-bump paths reduce repeated work and narrow transient-retry boundaries.
+
+### Fixed
+
+- Quantified regex alternations without prefix overlap are no longer rejected by the suppression matcher.
+- Wiki sync fallback replacement no longer carries unused state.
+- Review execution paths retain the MCP query-token fallback needed by deployed callback clients.
+
+### Verification
+
+- `bunx tsc --noEmit` passed.
+- `bun run lint` passed.
+- `bun run test:unit` passed with `5684 pass`.
+- Push CI for `e1c4e03159` passed.
+- Deployed revision `ca-kodiai--deploy-e1c4e03159e6-20260626-001905` passed `/healthz` and `/readiness`.
+- Live explicit `@kodiai review` trigger was posted on `xbmc/xbmc#28172` in comment `4807535661`.
+
 ## v0.45 (2026-06-25)
 
 MCP callback reliability, mention grounding, wiki sync recovery, and review-publication hardening — found by reviewing production logs and validated live on Kodi PRs.

README.md

@@ -4,7 +4,7 @@ Kodiai  is an installable GitHub App that delivers AI-powered code review, conve
 
 Service-level runtime features like Slack webhook relay are configured through environment variables, not `.kodiai.yml`.
 
-45 milestones shipped (v0.1 through v0.45). See [CHANGELOG.md](CHANGELOG.md) for documented release history.
+46 milestones shipped (v0.1 through v0.46). See [CHANGELOG.md](CHANGELOG.md) for documented release history.
 
 ## Quick Start
 
@@ -56,6 +56,7 @@ For the full architecture walkthrough — components, data flow, retrieval pipel
 ## Features
 
 Recent shipped milestones include:
+- v0.46 review/deployment reliability hardening, including MCP auth fallback, review and knowledge-path optimization indexes, PR-file retry pagination, cluster candidate lookup cleanup, and deployed live `@kodiai review` trigger proof on `xbmc/xbmc#28172`
 - M075 production-log cleanup, candidate-publication expected-policy-block reclassification, structured review timeout/addon-check classification, bounded moved-to-details candidate evidence, and live `@kodiai review` proof on `xbmc/xbmc#28172`
 - M074 review validation truth and same-PR finding lifecycle evidence, with explicit `@kodiai review` live proof on `xbmc/xbmc#28172` publishing real findings through the `interactive-review` lane
 - M073 review-budget and continuation hardening, including prompt-section budgeting, cache telemetry, continuation compaction, visible budget diagnostics, and remediation proof

scripts/verify-m055-s01.test.ts

@@ -21,10 +21,11 @@ const PASSING_README = `# Kodiai
 
 Kodiai is an installable GitHub App that delivers AI-powered code review, conversational assistance, issue intelligence, and Slack integration. One installation replaces per-repo workflow YAML — configure behavior with an optional .kodiai.yml file.
 
-44 milestones shipped (v0.1 through v0.44). See [CHANGELOG.md](CHANGELOG.md) for release history.
+46 milestones shipped (v0.1 through v0.46). See [CHANGELOG.md](CHANGELOG.md) for release history.
 
 ## Recent Shipped Milestones
 
+- **v0.46 — review/deployment reliability:** MCP auth fallback, PR-file retry pagination, and cluster candidate lookup cleanup are shipped with live proof on xbmc/xbmc#28172.
 - **M074 — review validation truth:** explicit @kodiai review live proof on xbmc/xbmc#28172 publishes real findings with bounded lifecycle and validation truth evidence.
 - **M073 — review-budget reliability:** review-budget, cache telemetry, and continuation compaction diagnostics are shipped.
 
@@ -46,6 +47,14 @@ Both workflows also support manual workflow_dispatch runs for testing, and any f
 
 const PASSING_CHANGELOG = `# Changelog
 
+## v0.46 (2026-06-26)
+
+Review/deployment reliability.
+
+## v0.45 (2026-06-25)
+
+MCP callback reliability.
+
 ## v0.44 (2026-06-18)
 
 Review-publication reliability.
@@ -188,7 +197,8 @@ describe("verify m055 s01 docs truth harness", () => {
       readTextFile: async (filePath: string) => {
         if (filePath.endsWith("README.md")) {
           return PASSING_README
-            .replace("44 milestones shipped (v0.1 through v0.44).", "43 milestones shipped (v0.1 through v0.43).")
+            .replace("46 milestones shipped (v0.1 through v0.46).", "45 milestones shipped (v0.1 through v0.45).")
+            .replace("MCP auth fallback", "MCP compatibility")
             .replace("Slack webhook relay", "Slack integration")
             .replace("nightly-reaction-sync runs bun scripts/sync-triage-reactions.ts shortly after issue sync.", "Nightly workflows keep things current.");
         }
@@ -233,9 +243,12 @@ describe("verify m055 s01 docs truth harness", () => {
         status_code: "package_wiring_missing",
       }),
     ]);
-    expect(report.checks[0]?.detail).toContain("44 milestones shipped");
+    expect(report.checks[0]?.detail).toContain("46 milestones shipped");
+    expect(report.checks[1]?.detail).toContain("MCP auth fallback");
     expect(report.checks[1]?.detail).toContain("Slack webhook relay");
     expect(report.checks[2]?.detail).toContain("nightly-reaction-sync");
+    expect(report.checks[3]?.detail).toContain("v0.46");
+    expect(report.checks[3]?.detail).toContain("v0.45");
     expect(report.checks[3]?.detail).toContain("v0.44");
     expect(report.checks[3]?.detail).toContain("v0.43");
     expect(report.checks[3]?.detail).toContain("v0.42");

scripts/verify-m055-s01.ts

@@ -5,9 +5,14 @@ const COMMAND_NAME = "verify:m055:s01" as const;
 const README_PATH = path.resolve(import.meta.dir, "../README.md");
 const CHANGELOG_PATH = path.resolve(import.meta.dir, "../CHANGELOG.md");
 const PACKAGE_JSON_PATH = path.resolve(import.meta.dir, "../package.json");
-const EXPECTED_SHIPPED_COUNT_LINE = "44 milestones shipped (v0.1 through v0.44).";
+const EXPECTED_SHIPPED_COUNT_LINE = "46 milestones shipped (v0.1 through v0.46).";
 const EXPECTED_PACKAGE_SCRIPT = "bun scripts/verify-m055-s01.ts";
 const REQUIRED_RECENT_FEATURE_MARKERS = [
+  "v0.46",
+  "review/deployment reliability",
+  "MCP auth fallback",
+  "PR-file retry pagination",
+  "cluster candidate lookup",
   "M074",
   "validation truth",
   "xbmc/xbmc#28172",
@@ -35,6 +40,8 @@ const REQUIRED_NIGHTLY_WORKFLOW_MARKERS = [
   "GitHub Actions workflow run status",
 ] as const;
 const REQUIRED_CHANGELOG_RELEASE_MARKERS = [
+  "## v0.46",
+  "## v0.45",
   "## v0.44",
   "## v0.43",
   "## v0.42",
@@ -269,7 +276,7 @@ function buildReadmeRecentFeaturesCheck(readmeContent: string): Check {
   return passCheck(
     "M055-S01-README-RECENT-FEATURES",
     "readme_recent_features_ok",
-    `README.md covers recent milestones M073-M074 and retains M051-M054/M066 shipped feature markers.`,
+    `README.md covers v0.46 and recent milestones M073-M074 while retaining M051-M054/M066 shipped feature markers.`,
   );
 }
 
@@ -309,7 +316,7 @@ function buildChangelogRecentReleasesCheck(changelogContent: string): Check {
   return passCheck(
     "M055-S01-CHANGELOG-RECENT-RELEASES",
     "changelog_recent_releases_ok",
-    "CHANGELOG.md includes v0.29 through v0.31 and current v0.36 through v0.44 release entries.",
+    "CHANGELOG.md includes v0.29 through v0.31 and current v0.36 through v0.46 release entries.",
   );
 }